VulnHub

Real-time Cybersecurity News

Telegram mini apps used in large-scale crypto scams and malware distribution

SCM feed for Latest
Actively Exploited
Malware

Overview

A recent report has revealed that the FEMITBOT platform is being exploited for large-scale scams, including fake cryptocurrency schemes and fraudulent financial services. These scams also involve the distribution of malware disguised as AI tools and streaming sites. Users of Telegram are particularly at risk, as these mini apps are being used to lure individuals into these scams. The situation raises significant concerns about the safety of online financial transactions and the potential for users to lose money or have their personal information compromised. As these scams proliferate, it is crucial for users to remain vigilant and skeptical of unsolicited offers in online messaging platforms.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: Telegram mini apps, cryptocurrency platforms, financial services
  • Action Required: Users should be cautious of unsolicited offers, verify the legitimacy of apps before use, and report suspicious activity to Telegram.
  • Timeline: Ongoing since recent months

Original Article Summary

The FEMITBOT platform facilitates various scams, including fake cryptocurrency, financial services, AI tools, and streaming sites.

Impact

Telegram mini apps, cryptocurrency platforms, financial services

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Ongoing since recent months

Remediation

Users should be cautious of unsolicited offers, verify the legitimacy of apps before use, and report suspicious activity to Telegram.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Malware.

Read Original Article

Related Coverage

NCSC Warns of an AI-Fuelled “Vulnerability Patch Wave”

Infosecurity Magazine

The UK's National Cyber Security Centre (NCSC) is warning organizations to brace for a wave of new software updates driven by advancements in artificial intelligence. This surge in updates is expected as developers respond to newly discovered vulnerabilities that AI tools can help identify more efficiently. The NCSC emphasizes that businesses and institutions need to ensure their systems are up-to-date to protect against potential security threats that exploit these vulnerabilities. With the growing reliance on software across various sectors, timely patching becomes crucial to maintain cybersecurity. Organizations are encouraged to review their update policies and prepare for increased patch management activities in the coming months.

May 5, 2026

MetInfo, Weaver E-cology Vulnerabilities in Attackers’ Crosshairs

SecurityWeek

Recent vulnerabilities in MetInfo and Weaver E-cology software have been identified, allowing remote attackers to execute arbitrary code without authentication. This means that attackers could potentially take control of systems running these applications through specially crafted requests. The risks are significant as these vulnerabilities expose users to potential data breaches and system compromises. Organizations using these platforms should prioritize addressing these security flaws to protect their systems. The situation underscores the ongoing need for vigilance in software security and timely updates.

May 5, 2026

WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities

SecurityWeek

WhatsApp recently disclosed two vulnerabilities that could pose risks to its users. The first is a file spoofing issue, which could allow attackers to disguise a malicious file as a legitimate one. The second vulnerability involves an arbitrary URL scheme that could lead to unwanted actions when users click on certain links. These vulnerabilities were reported to Meta through their bug bounty program and have been addressed in updates released earlier this year. Users of WhatsApp should ensure their app is updated to maintain security, as these vulnerabilities could potentially be exploited if left unpatched.

May 5, 2026

Trellix Reveals Unauthorized Access to Source Code

Infosecurity Magazine

Trellix, a security vendor, has reported a breach that resulted in unauthorized access to its source code. The breach raises concerns about the potential for further exploitation of the accessed code, which could lead to vulnerabilities in the company's products or services. While the specifics of what data was accessed remain unclear, such incidents can undermine customer trust and affect the overall security posture of companies relying on Trellix’s solutions. This incident serves as a reminder of the importance of robust security measures and monitoring against unauthorized access. Companies in the cybersecurity sector must remain vigilant to protect sensitive information and maintain their reputations.

May 5, 2026

Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

The Hacker News

A serious vulnerability has been discovered in Weaver E-cology, an enterprise office automation platform. This flaw, identified as CVE-2026-22679, allows attackers to execute code remotely without authentication. It affects versions of Weaver E-cology prior to 10.0.20260312 and has a high severity score of 9.8, indicating its potential for significant impact. The issue is actively being exploited in the wild, putting users and organizations at risk of unauthorized access and control over their systems. Companies using this software should prioritize updating to the latest version to protect against these attacks.

May 5, 2026

Can your coding style predict whether your code is vulnerable?

Help Net Security

Researchers at the University of Massachusetts Dartmouth are exploring whether coding styles can indicate vulnerabilities in software. They have found that individual developers leave distinct 'fingerprints' in their code, including naming conventions and loop structures. This study aims to determine if these unique patterns can also signal potential weaknesses in the code. The implications of this research could be significant, as it may lead to new methods for identifying vulnerabilities before they can be exploited. If successful, this could help developers write safer code by understanding the risks associated with certain coding habits.

May 5, 2026